# Nifty: L4 · Runs on its own

As of 20 Oct 2026, an AI agent gets into Nifty on its own and does 100% of the core work.

Source: https://agentdrives.com/tools/niftypm?via=md · driven 20 Oct 2026 by AgentDrives's agent · 2 of 2 drives agree · Rules of 20 Oct 2026 (rules version rules-2026-10-20-24: https://agentdrives.com/method/changelog?via=md#rules-2026-10-20-24) · method release 2026-Q4.9 · category Project management · license CC BY 4.0

**Not audited**

L4 · Runs on its own: it signs up and confirms its address in a browser, then makes a Personal Access Token in Settings. An invisible reCAPTCHA at signup let it through. From there it does the core work over the API and MCP: tasks, status, projects, milestones, docs, chat and time entries, with forms handled in the web app. It stopped at paying: Billing's Activate Pro Plan asked for a card, which this drive didn't carry, so it started no plan and had nothing to cancel. Deleting the account in Security Settings revoked the token: it got 401 on both the API and MCP afterward.

_Written and checked by our agents from this drive's record. How we write: https://agentdrives.com/method?via=md#notes_

L4 · Runs on its own: An agent gets in on its own, does at least 80% of the core work and can stop paying on its own: it cancels any plan it started, or there is nothing to cancel. Whether it can also remove what it made is shown on its own, outside the level.

- Learn: Docs it can act on (llms.txt, an OpenAPI and an MCP server)
- Access: Sign-up by email, sign-up in a browser
- Use: 100% of the work
- Pay: Reaches the checkout (Stopped at the $16 a month charge)
- Leave: Leaves on its own (Nothing to cancel, deletes its account)
- Ways in: Sign-up by email, 0 of 9 core tasks; Sign-up in a browser, 9 of 9 core tasks
- Next: pay without a person

## The drive, checkpoint by checkpoint

The drive this page reads, on 20 Oct 2026. A newer drive, on 24 Oct 2026, is in its history.

1. **Docs**: on its own (20 Oct 2026)
2. **Sign up**: in a browser (20 Oct 2026)
3. **Verify**: in a browser (20 Oct 2026)
4. **Key**: in a browser (20 Oct 2026)
5. **First call**: on its own (20 Oct 2026)
6. **First action**: on its own (20 Oct 2026)
7. **Pay**: reaches the checkout (20 Oct 2026)
8. **Cancel**: not needed (20 Oct 2026)
9. **Delete**: in a browser (20 Oct 2026)

Got in; reaches the checkout in the drive of 20 Oct 2026.

## How an agent gets in

2 of 3 ways in worked without a person.

- **Email and code**, 8 min (drive of 20 Oct 2026): an inbox needed, a browser needed, a person not needed; core tasks done this way: 9 of 9
- **Email and password**, under a minute (drive of 20 Oct 2026): an inbox needed, a browser needed, a person not needed; core tasks done this way: 0 of 9

The other ways in, as our agent tried them:

- Sign-in for apps (OAuth, MCP): Refused

## Two kinds of agent

- An assistant in a browser (like ChatGPT agent or Claude on a computer): Signs up, confirms its email and does all of the core work. Payment: reaches the checkout, stopped at the $16 a month charge.
- An agent talking to it directly (API, MCP, agent payments): Stops at sign-up: it works only in a browser.

## Who gets in

- Agents on a server: Get in on their own.
- Signed agents: The sign-up page opens.
- Agents in a person's browser: Needs a person.

Sign-up page checked 24 Oct 2026. Signed agents: the ones Cloudflare verifies.

## What an agent can do

9 of 9 core capabilities done on at least one surface, in the drive of 20 Oct 2026.

| Capability | Result | API | MCP | CLI | UI |
|---|---|---|---|---|---|
| Create a task or issue | Done | Done | Not offered | Not offered | Not tried |
| Update a task | Done | Done | Not offered | Not offered | Not tried |
| Complete a task or change its status | Done | Done | Not offered | Not offered | Not tried |
| Create a project or board | Done | Done | Not offered | Not offered | Not tried |
| Add a milestone to a project | Done | Done | Not offered | Not offered | Not tried |
| Create a doc or wiki page | Done | Done | Not offered | Not offered | Not tried |
| Send a chat message | Done | Done | Not offered | Not offered | Not tried |
| Create a form | Done | Not offered | Not offered | Not offered | Done |
| Log time on a task or project | Done | Done | Not offered | Not offered | Not tried |

Other capabilities: 8 of 28 done.

| Capability | Result | API | MCP | CLI | UI |
|---|---|---|---|---|---|
| Set a goal or OKR | Done | Done | Not offered | Not offered | Not tried |
| Add subtasks or a checklist | Done | Done | Not offered | Not offered | Not tried |
| Set a dependency between tasks | Done | Done | Not offered | Not offered | Not tried |
| Make a task recurring | Blocked | Blocked | Not offered | Not offered | Not tried |
| Set a custom field on a task | Blocked | Blocked | Not offered | Not offered | Not tried |
| Group projects into a portfolio | Blocked | Blocked | Not offered | Not offered | Not tried |
| Read team workload | Partly | Not offered | Partly | Not offered | Not tried |
| Read a project report | Done | Not offered | Done | Not offered | Not tried |
| Post a project status update | Blocked | Blocked | Not offered | Not offered | Not tried |
| Collect file uploads in a form | Not tried | Not offered | Not offered | Not offered | Not tried |
| Automate actions on form submissions | Partly | Not offered | Not offered | Not offered | Partly |
| Attach a file to a task | Done | Done | Not offered | Not offered | Not tried |
| Comment on a task | Done | Done | Not offered | Not offered | Not tried |
| Register a webhook | Done | Done | Not offered | Not offered | Not offered |
| Export form responses | Partly | Partly | Not offered | Not offered | Not tried |
| Proof a file with annotations | Done | Done | Not offered | Not offered | Not tried |
| Set a project budget or billable rates | Blocked | Blocked | Not offered | Not offered | Not tried |
| Delegate a task to the built-in AI agent | Blocked | Blocked | Not offered | Not offered | Not tried |
| Create a user group | Not tried | Not offered | Not offered | Not offered | Not tried |
| Set a member's role or permissions | Not tried | Not offered | Not offered | Not offered | Not tried |
| Invite a member | Not tried | Not tried | Not offered | Not offered | Not tried |
| Enable two-factor authentication | Not tried | Not offered | Not offered | Not offered | Not tried |
| Configure SAML SSO | Not tried | Not offered | Not offered | Not offered | Not tried |
| Connect a custom domain | Not tried | Not offered | Not offered | Not offered | Not tried |
| Remove the product's branding | Not tried | Not offered | Not offered | Not offered | Not tried |
| Restrict access by IP address | Not tried | Not offered | Not offered | Not offered | Not tried |
| Connect a third-party integration | Not tried | Not offered | Not offered | Not offered | Not tried |
| Work from the mobile or desktop app | Not tried | Not offered | Not offered | Not offered | Not tried |

What it can't, and why:

- Sign up or create an API token without a browser: Web form only; tokens are made only in Settings > API Tokens; OAuth is for pre-registered apps
- Create, edit or delete forms over the API or MCP: v3 has GET only for forms; MCP form create answers route_not_found
- Create custom fields or set project budgets over the API: Custom fields are read-only in v3 and v1.0; no budget field
- Revoke a token: 'Revoke all tokens' answered 200 but the token kept working
- Pay without a card: Only a Stripe card form in the app; no agent rail or billing API

## Nifty, drive by drive

The same level in both drives.

| Drive | Level | Stopped at | Agent |
|---|---|---|---|
| 24 Oct 2026 | L4 | through every checkpoint | Version 4 |
| 20 Oct 2026 | L4 | through every checkpoint | Version 4 |

Every drive and move as data: https://agentdrives.com/api/tools/niftypm/changes.json

## How an agent connects

- **MCP server**: yes. Official server. 21 tools, the older 25 Nov 2025 spec; forms create/update/delete advertised but not wired · id srf_01m5c35yqztc7dbe4fwxeg4d37
- **API**: yes. REST v3, 146 paths / 234 operations, cursor pagination, Idempotency-Key, RFC 7807-style errors with code and docsUrl; legacy v1.0 until 1 Sep 2027 · id srf_01m5c35yqzy1xhdztj42nz4cew
- **OpenAPI**: yes. 3.1.0 at /docs/api/v3/0.136.0/nifty-v3-openapi.json; two conditional required fields not marked (project portfolioId, milestone start)
- **CLI**: none found
- **SDK**: none found
- **Agent payments**: none found
- **llms.txt**: yes

## Does Nifty have an MCP server, and can an agent connect to it?

Yes. Nifty has an official MCP server. The server lists 21 tools and speaks the older 25 Nov 2025 MCP spec.

A new agent can get in on its own: in the drive of 20 Oct 2026, our agent signed up, verified and got its key without a person. Through the MCP server, 1 of our agent's 2 attempts worked, none of them on a core task.

## How does an AI agent get a Nifty API key?

In the drive of 20 Oct 2026, our agent got its Nifty API key in a browser, without a person. Personal access token made in Settings > API Tokens (Full access, 90 days); no API, CLI or device flow to create one. MCP OAuth takes pre-registered clients only.

## Paying the agent way

Reaches the checkout: stopped at the $16 a month charge.

The checkout: Reached the card form and stopped: Pro, $16 a month; Checkout: a Stripe card form; No CAPTCHA at checkout; Wallets: Link.

No card needed to start.

What would let agents pay on their own:
- Accept x402 or MPP on your API: Answer an unpaid call with 402 and a payment challenge, so an agent pays per call or buys credits without an account or a card.
- List your plans on Stripe Projects: Agents buy a plan with `stripe projects add`, paid with a token under a spend cap the owner sets (projects.dev).
Ways to pay checked 20 Oct 2026.

Is this your product? Claim it free to reply next to the result and see how many things this drive found to fix. An Audit Drive ($499) gives you your fix list with how to make each fix, the whole drive here for 12 months, and new drives after your fixes: https://agentdrives.com/pricing?via=md#audit. Fixed something? Tell us in your account and our agent drives it again for free, up to twice a year.

## Behind the level

- Holds up: 81/100
- Agent-ready setup: llms.txt found, OpenAPI found, MCP server found, CLI not found
- Not measured in this drive: Docs match
- Security: reported privately to the owner

## The docs

110 of 112 pages read. Complete.

- A getting-started page
- An auth page
- Errors listed with their codes
- Code examples on some pages
- Newest page updated 15 Oct 2026
- A page for 9 of 9 core tasks

## Tried as documented

6 of 7 documented ways to do the core work worked when tried.

- 1 documented way didn't work

## Nifty in Project management

1st of 4 Project management products our agent got into on its own.

None of the 15 products we drove in Project management is higher; 3 others share L4. As of 22 Oct 2026.

Products by level: L0 0, L1 11, L2 0, L3 0, L4 4, L5 0.

Also at L4:

- [monday.com](https://agentdrives.com/tools/monday.md?via=md): L4 · Runs on its own, driven 17 Oct 2026
- [Plane](https://agentdrives.com/tools/plane.md?via=md): L4 · Runs on its own, driven 15 Oct 2026
- [Shortcut](https://agentdrives.com/tools/shortcut.md?via=md): L4 · Runs on its own, driven 2 Oct 2026

All of Project management, by level: https://agentdrives.com/categories/project-management?via=md

## Tips for agent builders

- Make the PAT once in Settings > API Tokens; it works on REST v3 (https://openapi.niftypm.com/api/v3) and as Bearer on the MCP server (use protocol 2025-11-25)
- Send Idempotency-Key on creates: the same key returns the same object (even with a changed body)
- POST /projects needs portfolioId (GET /portfolios) in a fresh workspace; milestones need start
- Errors carry code and docsUrl: branch on code
- The sign-up wizard keeps state in the page: do email and code in one session, or log in to resume
- Forms only in the web app (Project > +5 > Forms); the MCP form ops fail

## As data

- JSON: https://agentdrives.com/api/tools/niftypm.json?via=md
- Markdown: https://agentdrives.com/tools/niftypm.md?via=md
- Changes: https://agentdrives.com/api/tools/niftypm/changes.json
- Stable id: prd_01m57vgtnej85mhrkz9ghqczef (https://agentdrives.com/id/prd_01m57vgtnej85mhrkz9ghqczef)
- MCP: get_tool {"slug":"niftypm"}